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Since  the  December  1992  publication  of  the  Department  of  Defense  (DOD)  classified 
directive  on  Information  Warfare  (IW)  considerable  effort  has  been  expended  examining  this  issue. 
Despite  this  attention,  a  clear  vision  for  the  implementation  of  I W  within  DOD  and  the  U.S. 
Government  as  a  whole  has  yet  to  emerge.  Three  pillars  are  essential  to  achieving  a  viable  IW 
strategy  and  supporting  architecture:  policy/doctrine,  organization/training,  and 
requirements/technology.  Much  has  been  written,  discussed,  and  even  debated  on  the  need  for 
overarching  national  policy  in  this  area,  as  well  as  the  multitude  of  capabilities  and  vulnerabilities 
stemming  from  our  increa^  reliance  on  advanced  technology.  A  similar  focus  on  the 
organizational  component  of  I W  has  not  occurred.  The  study  sp^ifically  addresses  the  role  of 
organizations  as  a  key  component  of  I W.  Both  the  progress  achieved  to  date  within  DOD  and  the 
significant  challenges  remaining  to  be  overcome  at  the  interagency  level  are  examined.  Specific 
recommendations  are  provided  on  how  better  to  organize  the  I W  effort 
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Introduction 


Today  with  all  of  the  various  interpretations  and  multiple  definitions.  Information  Warfare  (IW) 
remains  an  enigma.  Since  the  Department  of  Defense  formally  published  the  original  classified  directive 
on  IW  in  December  1992,  the  Services,  Office  of  the  Secretary  of  Defense,  and  a  wide  range  of  joint 
activities  have  expended  considerable  effort  examining  this  issue.  While  there  is  a  general  recognition 
that  IW  has  the  potential  to  serve  as  an  important  force  multiplier,  the  concept  remains  in  its  infancy. 
Ultimately  the  success  of  IW  as  a  decisive  component  of  U.S.  national  secmrity  in  the  21st  century 
depends  upon  achieving  a  viable  IW  architecture.  This  architecture  must  comprise  three  key  areas: 
policy/doctrine,  organization/training,  and  requirements/technology.  Much  has  been  written,  discussed, 
and  even  debated  on  the  need  for  overarching  national  policy  in  this  area,  as  well  the  multimde  of 
capabilities  and  vulnerabilities  stemming  from  our  increased  reliance  on  advanced  technology.  However, 
a  similar  focus  on  the  organizational  component  of  IW  has  not  occvnred. 

This  paper  specifically  addresses  the  role  of  organizations  as  an  essential  element  in  developing 
and  implementing  a  viable  IW  strategy.  To  provide  a  common  reference  point,  the  paper  begins  by 
defining  IW.  Next  it  analyzes  the  progress  achieved  to  date  in  institutionalizing  IW  by  assigning 
responsibility  to  specific  organizations.  Both  the  progress  achieved  within  DOD  and  the  significant 
challenges  remaining  to  be  overcome  at  the  interagency  level  are  examined.  The  paper  concludes  with  a 
set  of  recommendations  on  how  to  better  organize  the  IW  effort  and  enable  it  to  emerge  as  a  decisive 
element  of  U.S.  national  security  strategy  in  the  21st  century. 

IW  Defined 

Information  Warfare  (IW)  was  formally  launched  in  December  1992  with  the  dissemination  of 
DOD  Directive  3600.1.'  From  the  outset,  widespread  discussion  and  understanding  of  IW  were 
hampered  by  its  Top  Secret  classification.^  In  September  1995  the  Assistant  Secretary  of  Defense  for 
Command,  Control,  Communications  and  Intelligence  (ASD(C3I))  published  the 


formal  DOD  unclassified  definition  of  IW: 

Actions  taken  to  achieve  information  superiority  by  affecting  adversary 

information, information-based  processes,  and  information  systems,  while  defending  one’s 

own  information,  information-based  processes,  and  information  systems. 

This  description  clearly  underscores  both  the  defensive,  as  well  as  offensive  aspects  of  IW.  In 

the  summer  of  1994,  the  Defense  Science  Board^  (DSB),  drawing  heavily  from  expertise  within  DOD, 

published  the  most  comprehensive  and  authoritative  discussion  of  IW  to  date.  The  report  highlighted  the 

distinction  between  information  m  warfare  and  information  warfare.  Information  in  warfare  pertains  to 

"getting  [information]  it  where  it  is  needed  in  a  timely  and  reliable  manner."’”  It  encompasses  the 

collection,  processing,  and  dissemination  of  information  and  is  synonymous  with  the  C4I  for  the 

Warrior”  vision  released  by  the  Joint  Staff  in  1992.  C4I  for  the  Warrior  addresses  the  concept  of  a 

global  Command,  Control,  Communications,  Computer,  and  Intelligence  system  directly  linking  military 

units  around  the  globe  in  an  interoperable,  fully  integrated  fashion  spanning  the  range  of  military 

operations  from  peace  to  war.^ 

Information  in  warfare  capitalizes  on  the  national  information  infrastructure  (Nil). 

Characterized  as  an  "information  highway,®  the  Nil  is  the  growing  worldwide  information  infrastructure 
which  transcends  industry,  media,  and  the  military  and  includes  government  and  non-government 
entities.  Most  activities  now  rely  on  the  information  infrastructure  including  the  banking, 
transportation,  manufacturing,  and  electrical  power  industries.  The  Defense  Information  Infrastructure 
(DID  is  an  integral  part  of  the  Nil  with  over  95  percent  of  DOD’s  worldwide  telecommunications  needs 
satisfied  by  commercial  telecommunications  carriers.”^  Military  activities  relying  on  the  DII  include 
transp>ortation,  logistics,  financial,  manpower,  and  personnel  and  traming. 

While  C4I  for  the  Warrior  focuses  on  harnessing  ever-increasing  computer  storage  and  exchange 
capabilities,  IW  targets  these  information  systems.  The  distinction  between  C4I  for  the  Warrior  and  IW 
is  extremely  important.  IW  employs  offensive  techmques  such  as  deception,  electronic  jammers, 
munitions  and  advanced  technologies  to  deceive,  deny,  exploit,  damage,  or  destroy  adversary 


2 


information  systems,  while  at  the  same  time  protecting  friendly  information  systems  from  disruption, 
exploitation  and  damage  by  an  adversary  The  target  of  IW  may  range  from  influencing  national  level 
decisionmakers  to  corrupting  the  automated  control  of  transportation  systems.®  defensive  IW  protects 
friendly  information  systems  from  disruption,  exploitation  and  damage  by  an  adversary  For 
example,  the  Army’s  ongoing  digitization  of  the  battlefield  is  an  application  of  information  in  warfare  at 
the  operational  and  tactical  levels.  Defensive  IW,  on  the  other  hand,  focuses  on  identifying  and 
protecting  vulnerabilities  which  arise  from  this  increased  reliance  on  technology. 

The  emergence  of  Command  and  Control  Warfare  (C2W)  has  been  fundamental  in  understanding 
IW."  In  an  article  in  Signal  magazine  LTGen  James  Clapper,  then  Director  Defense  Intelligence 
Agency  (DIA),  wrote  "the  closest  description  of  information  warfare  might  be  found  in  the  definition  of 
conunand  and  control  warfare.”*^  IW  and  C2W,  however,  are  not  interchangeable  terms.  C2W  is  a 
subset  of  IW.  The  Chairman  of  the  Joint  Chiefs  of  Staff  (CJCS)  Memorandum  of  Policy  (MOP)  30, 
states  "C2W  is  the  military  strategy  which  implements  IW  on  the  battlefield.”'^  C2W  is  designed  as  an 
essential  part  of  an  overall  theater  campaign  plan.  It  is  implemented  during  "joint  military  operations 
when  U.S.  military  forces  unilaterally  or  as  part  of  an  allied/coalition  force  are  opposed  or  threatened  by 
an  organized  military  or  paramilitary  force.”''*  C2W  focuses  on  an  adversary’s  military  command  and 
control  when  military  force  is  applied.  On  the  other  hand,  the  use  of  the  word  "warfare”  in  the  term 
IW  does  not  limit  IW  to  a  military  conflict,  declared  or  otherwise.'®  IW  targets  the  entire  information 
infrastructure  of  an  adversary  -  political,  economic,  and  military  throughout  the  continuum  of  operations 
from  peace  to  war. 

Organizational  Imperative 

IW,  as  this  definitional  discussion  highlights,  is  a  complex  issue.  Organizations  are  essential  in 
actually  implementing  this  new  concept  and  achieving  a  viable  IW  architecture.  IW  will  only  become 
institutionalized  if  activities  actually  take  responsibility  for  planning  and  executing  IW.  Today  IW 
offices  have  been  stood  up  throughout  DOD  focusing  on  offensive  and  defensive  IW  capabilities,  but  for 
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the  most  part  the  budgets  and  staffs  of  these  elements  are  very  limited.  They  represent  an  important 
start  in  what  will  likely  be  a  long  and  slow  process. 

IW  Executive  Board:  The  Deputy  Secretary  of  Defense  chairs  an  IW  Executive  Board 
established  in  May  1995  which  comprises  senior  officials  within  the  department  including  the  Vice 
Chairman  Joint  Chief  of  Staff  (VCJCS)’^.  Supporting  the  IW  Executive  Board  is  an  IW  Council  chaired 
by  the  Assistant  Secretary  of  Defense  for  Command,  Control,  Communications  and  Intelligence 
(ASD(C3I)).  The  Executive  Board  is  chartered  to  address  IW  roles  and  responsibilities  and  serve  as  the 
DOD  focal  point  for  IW  discussion  at  the  national  level.  The  Board  is  a  welcome  addition  as  it 
demonstrates  an  awareness  by  senior  DOD  officials  of  the  need  to  coordinate  IW,  not  only  within  the 
department,  but  in  the  interagency  arena.  However,  senior  officials  are  too  busy  to  spend  a  great  deal  of 
time  on  any  one  issue,  particularly  one  that  has  not  reached  crisis  proportions.  This  is  the  point  Robert 
McNamara  makes  in  his  book  In  Retrospect  when  discussing  the  evolution  of  U.S.  policy  in  Viemam 
during  the  Kennedy  and  Johnson  administrations  and  the  same  is  true  today.'’  You  need  to  have  the  pull 
from  the  top,  but  it  is  important  that  lower  levels  are  fully  energized. 

ASD  C3I :  The  ASD(C3I),  as  the  senior  IW  advisor  to  the  Secretary  of  Defense,  has  organized 
a  small  IW  Directorate  comprising  less  than  ten  personnel  to  help  him  execute  his  responsibilities.  It 
was  the  foreruimer  to  this  office  which  drafted  the  original  IW  directive  in  1992.  The  IW  Directorate 
conducts  centralized  planning,  coordination,  and  oversight  for  IW  and  conducts  program  reviews  of 
selected  Service  and  defense  agency  IW  efforts.  In  May  1995  the  IW  Directorate  sponsored  an  IW 
wargame  for  senior  government  officials  designed  to  raise  the  profile  of  the  threat  to  the  U.S. 
information  infrastructure.'* 

The  IW  Directorate  has  also  focused  on  initiating  a  DOD  "Red  Team”  effort.  This  was  one  of 
the  IW  recommendations  from  the  1994  Defense  Science  Board  report  to  "jump  start  Defensive  IW.”'® 
Under  this  concept  personnel  knowledgeable  in  adversaries’  offensive  IW  form  a  team  to  "attack”  the 
DOD  information  infrastructure.  Given  the  magnimde  of  the  vulnerabilities,  the  objective  would  be  to 
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have  this  capability  distributed  throughout  DOD  and  carried  out  at  various  levels  and  locations.  This 
concept  dovetails  with  the  Computer  Emergency  Response  Team  (CERT)  which  reacts  to  real  world 
intrusions  into  computer  systems.  The  Defense  Information  Systems  Agency  (DISA)  has  stood  up  small 
offices  which  accomplish  both  these  tasks,  but  a  more  comprehensive  program  is  necessary.  In  the 
twelve  months  prior  to  July  1994  DISA  detected  roughly  3,600  attacks  on  military  networks,  but 
officials  estimate  they  detected  only  two  percent  of  all  the  attacks,  raising  the  estimated  number  to 
182,000.20 

The  "Red  Team”  program  is  designed  to  increase  awareness  throughout  DOD  of  the 
vulnerabilities  of  automated  systems  and  improve  the  overall  security  posture.  A  comprehensive  "Red 
Team”  effort  can  significantly  reduce  vulnerabilities  in  the  near  term  as  many  existing  problems  are 
attributed  to  inadequate  training  of  operators  and  system  administrators.  As  the  head  of  a  CERT  team 
stated,  "the  problem... is  a  lack  of  understanding  and  awareness  and  a  lack  of  training  and  technical 
competence  on  the  part  of  the  user  community.  ”2'  The  "Red  Team”is  a  laudable  objective,  but 
ASD(C3I)  presently  only  coordinates  and  does  not  direct  action.  The  Joint  Staff  has  designated  the  Joint 
Command  and  Control  Warfare  Center  (JC2WC)  at  San  Antonio,  Texas  as  executive  agent  to  support  the 
OSD  IW  Red  Team  effort.  However,  implementation  of  the  "Red  Team”  concept  is  evolving  slowly 
given  budget  constraints  and  manpower  reductions  in  the  Services  and  defense  agencies. 

USD(P):  In  1995  the  Under  Secretary  of  Defense  (Policy)  (USD(P))  created  an  Infrastructure 
Policy  Directorate.  This  office  focuses  on  emergency  preparedness  and  shaping  the  role  of  DOD  in  the 
protection  of  infrastructures,  including  coordination  between  DOD  and  non-DOD  government,  and 
civilian/corporate  owned  infrastructures. 22  These  are  important  responsibilities  which  clearly  fall  under 
the  heading  of  defensive  IW.  As  this  office  matures,  it  will  be  incumbent  upon  the  IW  Council  and 
Executive  Board  to  insure  IW  activities  within  ASD(C3I)  and  USD(P)  are  delineated  and  deconflicted,  if 
necessary. 

Joint  Staff:  In  the  Joint  arena,  IW  organizations  have  also  emerged.  On  the  Joint  Staff, 
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proponency  for  IW  is  now  shared  between  the  Directorate  for  Operations,  J3,  and  the  J6,  Directorate  for 
Command,  Control,  Communications,  Computers,  and  Intelligence  (C4I)  under  a  Memorandum  of 
Understanding  signed  in  October  1994.  While  conceptually  this  may  have  merits  with  each  directorate 
bringing  a  unique  dimension  of  IW,  in  reality  as  Lt  Gen  Clapper,  former  Director,  DIA,  has 
recommended,  the  Operations  Officer  should  be  the  overall  staff  coordinator  as  he  is  for  all  other 
operations  issues.^ 

The  current  arrangement  on  the  Joint  Staff  presents  some  unique  challenges  as  no  one  is  actually 
in  charge.  The  J3  and  J6  principals  are  too  busy  to  dedicate  the  constant  attention  this  area  requires  and 
day-to-day  responsibility  for  IW  on  the  Joint  Staff  is  delegated.  A  need  exists  for  direct  flag  officer 
sponsorship  to  orchestrate  joint  IW  policy  and  doctrine  development,  conduct  operational  planning,  and 
establish  requirements.  A  dedicated  flag  officer  sponsor  would  greatly  facilitate  coordination  with 
Services,  OSD,  the  Intelligence  Community  and  as  IW  matures,  the  interagency  and  civilian  sectors.  It 
would  also  send  a  strong  message  that  IW  is  an  important  joint  warfighting  issue  requiring  immediate 
high-level  attention. 

Within  the  Joint  Staff  J3,  responsibility  for  offensive  IW  now  resides  within  the  Information 
Warfare  /Special  Technical  Operations  Division  (IW/STOD).  This  division  is  responsible  for 
coordinating  compartmented  planning  between  the  Services,  Combatant  Commands,  and  DOD  agencies. 
Bob  Woodward  writes  in  The  Commanders,  the  Special  Technical  Operations  Center  (STOC)  is  "a 
command  and  communications  center  for  operations  involving  the  sensitive  "black”  programs  known 
only  to  those  cleared  to  the  special-access  compartments.”^^  The  IW/STOD  also  has  responsibility  for 
coordinating  all  facets  of  C2W  for  the  Joint  Staff  including  policy,  doctrine,  and  operational  issues.  It  is 
this  office  which  authored  MOP  30,  led  the  preparation  of  Joint  Pub  3-13  and  will  draft  IW  doctrine. 
This  arrangement  imderscores  the  important  linkage  between  C2W  and  IW.  As  the  military  proceeds  to 
operationalize  IW,  the  IW/STOD  represents  the  linchpin  for  ensuring  the  integration  of  all  dimensions  of 
joint  IW. 
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It  has  been  suggested  that,  just  as  we  continue  to  use  a  Single  Integrated  Operational  Plan 
(SIOP)  for  strategic  nuclear  warfare,  DOD  might  consider  the  use  of  an  "IW  SIOP”  which  addresses 
offensive  and  defensive  deconfliction  and  intelligence  equity  issues.^  If  this  were  implemented,  the  task 
would  be  assigned  to  the  IW/STOD  to  coordinate  the  task.  Today  the  IW/STOD  focuses  principally  on 
support  to  the  Combatant  Commands,  but  as  IW  matures  with  both  its  non-  lethal  and  deterrence 
potentials,  greater  interagency  participation  and  coordination  will  undoubtedly  occur. 

JC2WC:  The  activation  of  the  Joint  Command  and  Control  Warfare  Center  (JC2WC)  at  San 
Antonio,  Texas  in  October  1994  provided  a  valuable  resource  for  the  Commanders  of  the  Combatant 
Commands  (CINCs).^*  As  a  field-operating  agency  of  the  Joint  Chiefs  of  Staff  and  headed  by  a  flag 
officer,^^  the  JC2WC  is  fully  engaged  in  the  warfighting  application  of  IW.  With  163  assigned 
personnel,  the  JC2WC  dispatches  tailored  teams  to  augment  CINC  and  Joint  Task  Force  staffs  and 
provide  C2W  expertise  in  all  joint  exercises  and  contingency  operations.  Personnel  from  the  JC2WC 
have  participated  in  U.S.  efforts  in  Bosnia  and  contingency  operations  in  both  Kuwait  and  Haiti.  Given 
the  high  turnover  of  personnel  on  CINC  staffs,  the  JC2WC  is  very  much  in  demand  for  its  C2W 
expertise. “ 

The  JC2WC  is  in  the  tinique  position  of  being  able  to  cross  fertilize  and  share  C2W  lessons 
learned  between  the  Combatant  Commands.  Accordingly,  the  organization  has  played  a  major  role  in 
developing  joint  C2W  doctrine  and  will  contribute  significantly  to  the  preparation  of  a  follow-on  C2W 
Joint  Tactics,  Techniques,  and  Procedures  (JTTP)  publication.  At  the  present  time,  the  JC2WC  is  fully 
engaged  accomplishing  its  assigned  tasks  with  respect  to  C2W.  It  is  only  now  beginning  to  analyze  its 
newly  assigned  responsibilities  as  executive  agent  in  support  of  the  OSD  IW  Red  Team  effort.  As  IW 
evolves  and  DOD’s  role  in  the  larger  IW  arena  is  clarified,  a  natural  progression  will  be  for  this 
organization  to  serve  as  the  nucleus  for  a  Joint  IW  center. 

Joint  COMSEC  Monitoring  Activity.  The  JCMA  is  another  field  operating  agency  of  the  Joint 
Chiefs  of  Staff  having  IW  applications.  It  was  created  in  1993  by  a  Memorandum  of  Agreement 
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between  the  Service  Operations  Deputies  and  Directors  of  the  Joint  Staff  and  NSA.  The  JCMA  is 
charged  with  conducting  "COMSEC  monitoring  (collection,  analysis,  and  reporting)  of  DOD 
telecommunications  and  automated  information  systems  (AIS)  and  monitoring  of  related 
noncommunications  signals.”^*  Its  purpose  is  to  identify  vulnerabilities  exploitable  by  potential 
adversaries  and  recommend  countermeasures  and  corrective  actions.  The  JCMA  focuses  on  unencrypted 
DOD  systems  and  "does  not  perform  traditional  telephone  monitoring,”  as  this  function  remains  a 
Service  responsibility.^®  The  Joint  Staff  Director  for  Operations  has  been  assigned  primary  responsibility 
for  JCMA  affairs.  This  facilitates  coordination  between  the  JC2WC  and  the  JCMA.  The  JCMA 
supports  both  real-world  operations,  as  well  as  joint  exercises  and  DOD  systems  monitoring.  The 
JCMA,  more  so  than  the  JC2WC,  already  has  the  expertise  to  perform  the  Red  Team  mission.  Rather 
than  further  diluting  the  already  stretched  resources  and  expertise  of  the  JC2WC,  it  would  make  better 
sense  to  designate  the  JCMA  as  executive  agent  to  support  the  OSD  Red  Team  IW  initiative. 

Joint  Spectrum  Center.  The  DOD  Joint  Spectrum  Center  (JSC)  was  activated  in  September  1994 
under  the  direction  of  the  Joint  Staff  J6.  The  JSC  assumed  all  the  mission  and  responsibilities  previously 
performed  by  the  Electromagnetic  Compatibility  Center,  as  well  as  additional  functions.  The  JSC 
deploys  teams  in  support  of  the  CINCs  and  serves  as  the  DOD  focal  point  for  supporting  spectrum 
supremacy  aspects  of  IW.  Notably  the  JSC  assists  warfighters  in  developing  and  managing  the  Joint 
Restricted  Frequency  List  (JRFL)  and  assisting  in  the  resolution  of  operational  interference  and  Jamming 
incidents.  While  informal  coordination  occurs  on  IW  related  issues  between  the  Joint  Spectrum  Center, 
the  Joint  COMSEC  Monitoring  Activity,  and  the  Joint  C2W  Center,  each  organization  interfaces 
separately  with  the  CINC  staffs.  No  formal  mechanism  is  yet  in  place  to  ensure  the  warfighters  obtain  a 
coordinated  IW  support  package. 

Combatant  Commands:  The  focus  of  warfighters  at  the  Combatant  Commands  remains 
planning  and  executing  C2W.  All  of  the  geographic  CINCs  now  have  C2W  staff  officers  assigned  in 
their  Operations  Directorates,  but  organizing  the  diverse  elements  which  comprise  C2W  is  a  challenge 
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for  CINC  staffs.  U.S.  Central  Command  (CENTCOM)  has  actually  physically  consolidated  the  staff 
officers  responsible  for  orchestrating  electronic  warfare,  operational  security,  military  deception  and 
psychological  operations  into  a  single  branch.  This  organization  can  serve  as  the  nucleus  as  new  IW 
capabilities  emerge  and  are  apportioned  to  the  CINCs.  Defensive  IW  poses  a  more  significant  challenge. 
While  the  CINCs  can  take  incremental  measures  to  unilaterally  reduce  vulnerabilities  of  their  information 
systems,  given  their  ultimate  dependence  on  the  national  information  infrastructure,  defensive  IW  must 
be  undertaken  as  part  of  a  larger  DOD  sponsored  initiative. 

Services:  Each  of  the  Services  have  created  or  are  participating  in  Information  Warfare  Centers 
or  Activities.  The  Air  Force  leads  the  Services  and  in  September  1995,  the  Chief  of  Staff  and  Secretary 
of  the  Air  Force  published  the  17  page,  Cornerstones  of  Information  Warfare  which  describes  how  "Air 
Force  doctrine  should  evolve  to  accommodate  information  warfare.”^'  The  Air  Force  was  also  the  first 
to  establish  their  Information  Warfare  Center  (AFIWC)  at  San  Antonio,  Texas  in  October  1993.  This 
was  accomplished  by  consolidating  the  Air  Force  cryptologic  support  center  and  the  electronic  warfare 
center.  The  AFIWC  serves  as  the  Air  Force  command  and  control  warfare  executive  agent  with 
approximately  1000  military  and  civilian  personnel  assigned.  The  Center  is  subordinate  to  the  Air 
Intelligence  Agency  closely  aligning  it  with  the  Intelligence  Commtmity.  The  Center  applies  the  teaming 
concept  integrating  the  intelligence  component  with  operators,  engineers,  communications  and  computer 
specialists,  both  offensive  and  defensive. The  AFIWC  also  has  an  ongoing  "Red  Team”  and  CERT 
effort  designed  to  improve  network  security  in  the  Air  Force.  The  Center  is  collocated  with  the  JC2WC 
and  both  organizations  work  closely  together.  Personnel  from  the  AFIWC  regularly  team  with  the 
JC2WC  on  major  deployments. 

On  1  October  1995,  the  Air  Force  created  its  first  Information  Warfare  Squadron  at  Shaw  Air 
Force  Base,  South  Carolina.  The  squadron’s  primary  purpose  will  be  to  protect  Air  Force  computers 
and  communications,  as  well  as  assisting  in  "infiltrating  an  enemy’s  computer  and  communications 
systems.  The  squadron  will  support  the  9th  Air  Force  commander  who  is  assigned  the  Central 
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Command  area  of  operations.  Evenmally,  the  Air  Force  will  set  up  more  squadrons  to  assist  air 

commanders  responsible  for  other  geographic  areas.  While  the  IW  Squadron  at  Shaw  AFB  presently 

only  has  two  officers  assigned,  there  will  be  as  many  as  40  by  August  1996,  when  the  squadron  is  slated 

to  be  operational.  Eventually,  the  squadron  might  grow  to  85  people.^"*  The  Air  Force  recognizes  it  is 

pushing  the  envelope,  but  as  General  Joseph  Ralston,  chief  of  Air  Combat  Command,  stated: 

You  can  sit  around  for  another  10  years  and  debate  about  what  some  of  the  problems  might 
be  [with  setting  up  an  information  warfare  squadron]... but  you  will  never  know  until  you 
actually  get  into  them  and  try  to  make  it  work  operationally.^^ 

The  Navy  established  the  Navy  Information  Warfare  Activity  (NIWA)  in  August  1994  to  serve 
as  their  focal  point  for  IW  activities.^^  Directly  subordinate  to  the  Naval  Security  Group,  the  NIWA  is 
located  at  Fort  Meade,  Maryland  and  is  closely  linked  to  the  National  Security  Agency. 

Given  the  rapid  pace  of  advancing  technology  the  Navy  has  given  the  NIWA  special  authority  to 
generate  requirements  md  procure  systems.  Traditionally  there  has  been  a  sharp  separation  in  the  Navy 
between  organizations  responsible  for  setting  requirements  and  those  charged  with  overseeing  their 
acquisition.  However,  with  new  generations  of  computers  and  information  systems  unveiled  on  average 
about  every  18  months,  the  Navy  has  adopted  a  more  streamlined  approach.  As  John  Davis,  technology 
adviser  to  the  Navy’s  Space  and  Electronic  Warfare  Directorate,  indicated,  "If  we  fall  more  than  one 
cycle  behind,  we  could  find  industry  putting  information  warfare  systems  into  potentially  hostile  nations 
at  the  same  time  that  US  force  receive  the  same  equipment.”^’ 

The  Navy  also  has  established  the  Fleet  Information  Warfare  Center  (FIWC)  at  Little  Creek, 
Virginia  from  existing  Fleet  Deception/C2W  Group  assets.^®  The  FIWC  serves  as  the  link  between  the 
NIWA  and  the  Atlantic  and  Pacific  Fleets.  With  personnel  deployed  on  carrier  battle  groups  throughout 
the  world,  the  FIWC  fulfills  a  similar  mission  for  the  Navy  that  the  JC2WC  does  for  the  joint 
warfighter.  The  IW  organizational  structure  created  by  the  Navy  enables  the 
FIWC  to  focus  on  near  term  operational  requirements,  while  the  NIWA  assumes  a  more  long-term 
perspective  keeping  abreast  of  IW  advances  and  developing  and  acquiring  systems. 
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Rather  than  create  a  separate  IW  organization,  the  Marines  intend  to  assign  liaison  officers  to  the 
respective  Service  IW  centers  to  benefit  from  their  efforts.  The  Navy  and  Marines  have  also  teamed  up 
to  develop  policy  guidance  for  Navy  and  Marine  IW/C2W  operations.  In  February  1995,  the  Marine 
Corps  Commandant  and  Chief  of  Naval  Operations  approved  a  plan  which  states,  "Navy  and  Marine 
Corps  must  have  a  fully  integrated  IW/C2W  capability... team  must  organize,  train,  and  equip  its  forward 
deployed  forces  to  conduct  IW/C2W.”’® 

The  Army  is  the  latest  Service  to  establish  an  IW  activity.  Officially  activated  in  May  1995,  the 
Land  Information  Warfare  Center  (LIWA)  is  subordinate  to  the  Army  Intelligence  and  Security 
Command  (INSCOM)  but  is  imder  the  operational  control  of  the  Headquarters  Department  of  the  Army, 
Deputy  Chief  of  Staff  for  Operations  (DCSOPS).  As  with  the  Air  Force  and  Navy,  the  Army  has 
closely  aligned  its  IW  effort  with  the  Intelligence  Community.  The  LIWA  is  a  totally  new  organization 
in  contrast  to  the  Air  Force  and  Navy  efforts  which  reorganized  existing  activities.  It  is  also  the  smallest 
of  the  three  Service  IW  activities  with  a  projected  end  strength  of  50-75  personnel.  The  primary  focus 
of  the  LIWA  is  to  provide  operational  support  at  the  Army  Corps  and  higher  levels.  The  Army  is  also 
coordinating  closely  with  the  Marines  to  assign  personnel  to  the  LIWA.  Given  its  small  size,  the  LIWA 
draws  upon  existing  capabilities  in  the  Army  including  psychological  operations,  electronic  warfare,  and 
operational  security.  The  Army  is  in  the  process  of  institutionalizing  a  "Red  Team”  effort  from  existing 
INSCOM  assets,  and  there  is  close  coordination  and  collaboration  with  NSA  on  mutual  IW  efforts. 

The  Services’  efforts  during  a  period  of  serious  budget  constraints  underscore  a  recognition  of 
the  importance  of  IW.  Except  for  the  general  responsibilities  delineated  in  the  original  DOD  IW 
directive.  Services  have  received  no  additional  policy  guidance  on  how  to  implement  IW.  In  reviewing 
Service  responses  to  IW,  they  have  established  organizations  which  best  suit  their  near  term  needs. 
Manpower  and  funding  for  Service  IW  initiatives  have  been  reallocated  internally  with  the  Air  Force 
taking  the  most  aggressive  approach. 

Over  time  Service  organizations  can  be  expected  to  evolve  as  IW  matures.  Today  much  of  their 
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focus  is  on  implementing  C2W,  the  military  application  of  IW.  Services  have  also  implemented  "Red 
Teams”  to  train  personnel  and  improve  security  awareness  of  the  vulnerabilities  associated  with 
information  systems.  Additionally,  while  the  linkages  of  Service  IW  organizations  with  the  Intelligence 
Community  is  valuable,  it  is  important  IW  does  not  become  an  intelligence  activity.  IW  needs  to  be 
controlled  and  fully  managed  by  the  warfighters  as  an  integral  part  of  an  overall  strategy.  In  that  regard, 
the  recent  activation  of  the  IW  Squadron  by  the  Air  Force,  separate  and  distinct  from  the  AFIWC,  is  a 
positive  step. 

Intelligence  Community:  Within  the  Intelligence  Community  there  exists  an  acute  appreciation 
of  the  enormous  impact  IW  has  on  their  efforts.  Each  organization,  DIA,  CIA  and  NSA  has  established 
an  office  to  orchestrate  IW  related  activities  and  satisfy  the  needs  of  their  consumers.  NSA,  in  addition 
to  it  its  intelligence  mission,  has  a  unique  responsibility  for  developing  "standards,  techniques,  systems, 
and  equipment”  for  classified  information.*  NSA  has  demonstrated  success  at  protecting  classified 
systems,  but  has  achieved  less  success  in  the  increasingly  vulnerable  area  of  unclassified  computer 
networks  where  it  plays  a  supporting  role. 

Under  the  1987  Computer  Security  Act,  the  National  Institute  for  Standards  and  Technology 
(NIST)  was  assigned  responsibility  for  developing  government  wide  standards  and  guidelines  for 
"unclassified,  sensitive  information.”'"  The  law  also  directed  NIST  to  draw  upon  technical  computer 
security  guidelines  developed  by  NSA."^  To  clarify  the  relationship  between  NIST  and  NSA  ,  a 
Memorandum  of  Agreement  (MOU)  was  formalized  in  1989  establishing  mechanisms  for  implementing 
the  Computer  Security  Act  of  1987.  The  MOU  has  been  controversial  because  of  concerns  in  Congress 
and  elsewhere  that  it  cedes  NSA  much  more  authority  than  was  intended  under  the  act.''^  The  act 
envisioned  NIST  requesting  NSA  expertise  as  needed,  but  instead  the  MOU  has  involved  NSA  in  all 
NIST  activities  related  to  information  security. 

Protecting  unclassified,  sensitive  information  is  essential  in  developing  an  effective  IW 
architecture.  Given  the  growing  threat  to  our  information  system,  NSA  officials  are  lobbying  for 
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increased  efforts  to  protect  unclassified  networks  While  NSA  certainly  has  tremendous  expertise  and 
is  the  national  authority  on  cryptographic  protection,  there  are  reservations  about  having  it  assume  a 
greater  role.  Some  perceive  a  conflict  of  interest  between  NSA’s  information  protection  role  and  its 
principal  intelligence  mission.  Additionally,  leadership  in  cryptography  does  not  imply  leadership  in 
other  areas  of  defensive  IW.  DOD  has  assigned  the  responsibility  of  protecting  its  own  information 
infrastructure  to  the  Defense  Information  Systems  Agency.''^  As  national  defensive  IW  policy  is 
formulated,  the  security  of  unclassified,  sensitive  information  must  be  addressed. 

Non  DOD  Organizations:  Although  defensive  IW  has  not  been  officially  embraced  outside  of 
DOD,  several  standing  organizations  focus  on  this  issue.  The  National  Communication  System  (NCS  ) 
was  established  in  1963  to  coordinate  the  planning  of  national  security  and  emergency  preparedness 
communications  for  the  federal  government  under  all  circumstances,  including  crisis  or  emergency, 
attack,  recovery,  and  reconstitution.  The  NCS  receives  policy  direction  directly  from  the  National 
Security  Council  (NSC)  but  is  managed  through  the  Department  of  Defense.^  The  NCS’s  National 
Coordinating  Center  for  Telecommtmications  is  staffed  full  time  by  both  government  and 
telecommunications  industry  representatives  whose  mission  is  to  respond  to  both  military  and  civil 
emergencies;  eg..  Desert  Storm,  Hurricane  Andrew  and,  more  recently,  the  bombing  of  the  Federal 
building  in  Oklahoma  City.'*’ 

The  National  Security  Telecommunications  Advisory  Council  (NSTAC)  was  established  during 
the  Reagan  Administration  to  advise  the  President  on  national  security  and  emergency  preparedness 
issues.  This  senior  body  is  composed  of  presidents  and  CEOs  of  major  telecommunications  and  defense 
information  systems  companies.  NSTAC  works  closely  with  NCS. 

The  Federal  Communications  Commission  (FCC)  also  plays  a  strong  role  in  reliability  and 
privacy  issues  regarding  the  public  switched  telephone  network.  The  Network  Reliability  Council  (NRC) 
was  created  in  1992  by  the  FCC  to  investigate  the  reliability  of  the  public  switched  network  following  a 
series  of  service  outages  in  1991.  The  efforts  culminated  in  a  one-thousand  page  document,  "Network 
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Reliability.”  The  FCC  expanded  the  membership  of  the  NRC  in  July  1994  and  gave  it  a  new  charter. 
Today  the  NRC  is  composed  of  CEOs  from  telephone  companies,  equipment  suppliers,  state  agencies, 
and  federal,  corporate,  and  consumer  users. 

Each  of  these  organizations,  as  well  as  NIST,  are  involved  in  aspects  of  defensive  IW.  What  is 
lacking,  however,  is  an  overarching  framework  linking  these  disparate  efforts  into  a  coordinated  effort. 
Within  the  government  someone  needs  to  be  in  charge.  The  NCS  may  serve  as  a  blueprint  for  this 
effort.  Not  only  does  it  have  in  place  representatives  and  links  to  all  major  government  agencies, 
including  the  Intelligence  Community,  but  it  is  a  model  for  government-industry  cooperation.  To  be 
successful,  defensive  IW  must  have  the  support  of  private  industry.  Not  only  must  awareness  of 
vulnerabilities  be  increased,  but  coordinated  steps  taken  to  reduce  the  risk.  That  is  the  exactly  the 
success  which  NCS  has  achieved  in  the  telecommunications  sector.  As  national  policy  is  developed  for 
IW,  strong  consideration  should  be  given  to  creating  an  organization  like  the  NCS  to  serve  as  the  focal 
point  for  this  effort  and  having  it  possibly  work  directly  for  the  Vice  President.  DOD  should  play  a  role 
in  the  organization  but  as  an  active  participant,  not  the  leader. 

An  Azimuth  for  the  Future 

There  has  been  a  proliferation  of  IW  activities  within  the  Services,  OSD,  joint  activities  and  defense 
agencies,  but  up  to  this  point  it  has  been  very  decentralized.  Revised  policy  and  formal  doctrine  will  go 
a  long  way  in  improving  everyone’s  understanding  of  IW  and  their  responsibilities.  Within  the  Office  of 
the  Secretary  of  Defense  (OSD),  one  central  office  needs  to  remain  as  the  focal  point  for  IW.  It  is 
important  that  the  offensive  and  defensive  dimensions  of  IW  are  fully  coordinated  and  it  made  clear  to 
everyone  in  the  department  and  in  the  interagency  arena  who  has  the  lead  in  OSD.  This  can  be  helped 
through  strong  leadership  by  the  IW  Executive  Board. 

Similarly  on  the  Joint  Staff,  a  single  office  needs  to  be  designated  as  the  locus  for  IW  related 
issues.  The  central  clearing  house  should  be  the,  J3,  Director  for  Operations.  While  both  the  J6  and  J2 
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play  key  roles  in  the  areas  of  defensive  IW  and  intelligence  support  respectively,  to  be  successful,  IW 
must  be  integrated  into  operations  and  that  is  the  purview  of  the  J3.  Given  the  complexity  and 
sensitivity  of  the  issues  involved  with  IW,  a  flag  officer  within  the  J3  should  be  assigned  full  time  to 
oversee  the  development  of  policy,  doctrine,  operational  planning  and  the  IW  component  of  the  Joint 
Warfighting  Capability  Assessment.  IW  has  enormous  potential  for  the  joint  warfighter.  A  flag  officer 
focusing  on  this  issue  will  ensure  the  joint  perspective  and  associated  equities  are  skillfully  articulated  as 
this  concept  is  hotly  debated  within  DOD  and  the  interagency  process. 

At  the  joint  level,  strong  consideration  should  be  given  to  more  effectively  leveraging  the 
capabilities  of  the  Joint  Command  and  Control  Warfare  Center,  Joint  COMSEC  Monitoring  Activity  and 
the  Joint  Spectrum  Center.  Each  of  these  organizations  is  a  field  operating  agency  of  the  Joint  Staff  and 
brings  a  unique  dimension  to  IW.  However,  aside  from  informal  coordination,  no  formal  mechanism  or 
oversight  exists  to  ensme  they  provide  optimum  IW  support  to  the  CINCs.  For  example,  while  the 
JC2WC  was  recently  designated  responsibility  for  the  joint  "Red  Team”mission,  the  Joint  COMSEC 
Monitoring  Activity  already  contains  the  nucleus  for  an  effective  joint  "Red  Team”  capability,  with 
responsibility  for  monitoring  DOD  automated  information  systems  and  related  noncommunications 
signals.  At  the  same  time,  close  coordination  is  essential  between  the  Joint  Spectrum  Center  and  the 
JC2WC  regarding  the  Joint  Restricted  Frequency  List  and  its  impact  on  the  planning  and  conduct  of 
electronic  warfare. 

The  Joint  Staff  needs  to  capitalize  on  the  full  potential  of  each  of  these  organizations  and  ensure 
there  is  unity  of  effort  in  plarming  and  executing  IW.  Serious  consideration  should  be  given  to  creating 
an  umbrella  Joint  Information  Warfare  Activity  with  the  JC2WC,  JCMA,  JSC  and  any  other  related 
activities,  as  subordinate  elements.  The  flag  officer  position  now  assigned  to  the  Joint  C2W  Center 
should  be  reallocated  to  provide  senior  leadership  at  the  Joint  IW  Center.  Working  directly  for  the 
Director  for  Operations  on  the  Joint  Staff,  he  can  ensure  the  Combatant  Commands  leverage  the  full 
potential  of  IW. 


15 


While  each  of  the  Services  has  undertaken  a  different  organizational  response  to  IW,  these 
activities  are  critical  in  laying  the  foundation.  They  serve  as  the  nucleus  upon  which  the  Services  can 
build  their  respective  IW  architectures.  These  organizations  will  almost  certainly  evolve  over  time,  but 
the  initial  framework  is  in  place.  Training  the  force,  particularly  operators  and  system  administrators  on 
the  defensive  aspects  of  IW,  must  be  tackled  in  the  near  term  and  enable  the  military  to  function  more 
effectively  in  this  new  environment. 

While  it  may  be  premature  to  specify  a  structure  at  the  interagency  level,  the  National 
Communication  System  model  cannot  be  overlooked.  Staffed  with  full  time  government  and 
teleconununications  industry  representatives,  the  NCS  serves  as  a  microcosm  of  the  effort  that  is  needed 
to  truly  implement  a  comprehensive  national  defensive  IW  campaign.  Just  as  within  DOD,  there  needs 
to  be  a  focal  point  to  function  as  the  national  information  assurance  coordinator  within  the  government  as 
a  whole.  Chronic  vulnerabilities  in  the  Nil  must  be  addressed  and  coordinated  actions  undertaken,  not 
only  in  the  telecommunications  and  automation  industries,  but  across  the  spectrum  of  activities  involving 
finance,  transportation,  power  generation  and  most  certainly  the  military. 

Summary 

IW  clearly  offers  enormous  potential  and  has  become  a  critical  issue  for  DOD  and  the  U.S. 
Government.  The  difficulty  that  currently  exists  is  the  absence  of  a  coherent  IW  architecture.  This 
paper  has  focused  on  the  status  of  the  organizational  component  of  that  architecture.  While  significant 
progress  in  this  area  has  been  achieved  within  DOD  since  the  concept  of  IW  was  formally  launched  in 
December  1992,  much  more  work  remains  to  be  done.  Within  DOD  the  primary  focus  must  be  on 
supporting  the  joint  warfighter  and  in  this  regard  the  existing  organizational  structure  must  be 
streamlined.  While  offensive  IW  remains  within  DOD’s  realm,  defensive  IW  is  truly  a  national  issue 
and  must  involve  the  private  sector.  The  interagency  arena  is  absolutely  critical  to  the  success  of 
defensive  IW.  While  DOD  can  be  a  major  player  m  this  area,  it  can  not  lead.  Leadership  in  this  area 
must  come  from  the  White  House.  IW  is  emerging  as  an  inexpensive,  yet  effective  means  to  directly 
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target  the  U.S.  homeland.  The  U.S.  must  plan  for  this  contingency  in  a  coherent  and  coordinated 
manner  and  a  sound  organizational  imderpinning  is  a  fundamental  pillar  to  both  a  DOD  and  national  IW 
architecture. 
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